fix(message): add DOMPurify to sanitize message

add conditional loading of message js libs
voyanttools · Oct 28, 2024 · bc0c9fd · bc0c9fd
1 parent e3f692d
commit bc0c9fd
Show file tree

Hide file tree

Showing 5 changed files with 1,575 additions and 0 deletions.
diff --git a/src/main/webapp/resources/jsp/load_js.jsp b/src/main/webapp/resources/jsp/load_js.jsp
@@ -15,9 +15,17 @@ String rtl_js = (String) request.getAttribute("rtl");
 <script type="text/javascript" src="<%= base_js %>/resources/jquery/current/jquery.min.js"></script>
 <script type="text/javascript" src="<%= base_js %>/resources/jquery/current/jquery-ui.min.js"></script>
 
+<%
+String showServerMessage = System.getProperty("org.voyanttools.server.showservermessage");
+if (showServerMessage != null && showServerMessage.equals("true")) {
+%>
 <!-- showdown -->
 <script type="text/javascript" src="<%= base_js %>/resources/showdown/showdown.min.js"></script>
 
+<!-- purify -->
+<script type="text/javascript" src="<%= base_js %>/resources/purify/purify.min.js"></script>
+<% } %>
+
 <!-- D3 -->
 <script type="text/javascript" src="<%= base_js %>/resources/d3/current/d3.min.js"></script>
 <script type="text/javascript" src="<%= base_js %>/resources/d3/fisheye.js"></script>